לוח משרות דרושים DevSecOps Engineer, לחיפוש זה נמצאו 18 משרות

the company harnesses the power of ai to transform how revenue teams win. the company revenue ai operating system unifies data, insights, and workflows into a single, trusted system that observes, guides, and acts alongside the worlds most successful revenue teams. powered by the company revenue graph, ai-powered intelligence, specialized agents, and trusted applications, the company helps more than 5,000 companies around the world deeply understand their teams and customers, automate critical sales workflows, and close more deals with less effort. for more information, visit company.
at the company, you will join a company built on innovative products, ambitious goals, and passionate people. we are shaping the future of revenue intelligence and we want people who are excited to build what comes next. you will work with a team that dreams big, moves fast, and cares deeply about the craft and about each other. here, transparency and trust are core to how we operate, and every person has the opportunity to make a visible impact. if you want to grow, stretch, and do work that truly matters, the company is the place to do the best work of your career.
the company's cloud engineering group is the infrastructure backbone of a platform that processes millions of customer interactions every day.
were looking for a devsecops manager to lead our israel-based devsecops team and own the security posture of the company's cloud infrastructure. youll inherit a strong, established team of DevOps and devsecops engineers with meaningful ownership and a mature security program.
this is a hands-on leadership role that combines people management, technical depth, and architectural influence. youll define the cloud security roadmap, remain close to the code and systems, and partner with product security, r&d, and cloud engineering to make security part of the platform by default.
youll own:
the security posture of the company's multi-cloud infrastructure across aws, azure, and gcp.
identity governance, least-privilege access, credential lifecycle management, and cloud vulnerability management.
security controls Embedded directly into the cloud platform, enabling r&d teams to build and operate securely by default.
Developer toolchain security, including ci/cd pipelines, software supply chain risks, and Developer -facing guardrails.
the implementation of security as code, replacing manual processes and ticket-based controls with scalable automation.
the leadership, development, and technical growth of a team of DevOps and devsecops engineers.
teams roadmap, priorities, and quarterly planning in alignment with cloud engineering and the broader security organization.
the teams role as the primary cloud security partner for product security, r&d, and cloud engineering.
clear security standards, ownership boundaries, and operating practices across the cloud platform.
youll solve:
security challenges across a large, evolving environment with multiple production cells, several cloud providers, and more than 500 engineers.
gaps in cloud identity, permissions, credentials, workload protection, and vulnerability management.
security risks within kubernetes, including rbac, pod security, network policies, and runtime protection.
risks across github, ci/cd pipelines, third-party dependencies, and the software supply chain.
friction between strong security controls and the speed, usability, and autonomy r&d teams need.
repetitive security work by turning manual controls into automated, reusable platform capabilities.
cross-functional challenges that require alignment between cloud engineering, product security, r&d, and compliance stakeholders.
emerging cloud security gaps by proactively identifying them, proposing practical solutions, and driving remediation through completion.
youll impact:
the company's ability to operate a secure, resilient, and scalable multi-cloud platform.

Artlist is a leading creative technology company on a mission to empower creators and brands to bring their vision to life with video. Offering cutting-edge AI tools and models for image, video, and voiceover creation, alongside high-quality creative assets and powerful editing tools, Artlist enables creators to stay on trend and achieve their creative goals. Trusted by over 30 million creators worldwide and top brands including Google, Amazon, Microsoft, and Versace, Artlist provides a seamless, subscription-based platform with a global license, giving creators everything they need to produce professional video content efficiently. For more information, visit artlist.io About the role We're looking for an Application Security Engineer to join Artlist's security team and work closely with Product and R&D on securing our applications, development processes, and AI-powered products. This is a hands-on engineering role for someone with a strong Application Security foundation who enjoys working directly with developers, building security automation, and helping teams design and ship secure products. You'll work across Application Security, cloud security, and AI-related security challenges, with significant ownership and the opportunity to shape how security is implemented across Artlist. What you'll do
* Partner with R&D and Product on threat modeling and secure design reviews.
* Embed security controls into the SDLC and CI/CD pipelines.
* Identify and remediate application and API security risks.
* Integrate and improve security tooling such as SAST, SCA, WAF and cloud security tools.
* Build security automation and internal tooling using Python, Bash or similar languages.
* Help secure cloud environments and production applications.
* Define practical security guardrails around authentication, authorization, data exposure, injection risks and rate limiting.
* Contribute to the security of AI-powered product features, including risks such as prompt injection, data leakage and model access.
* Support incident response and remediation when application or cloud security issues arise.

At UVeye, we're on a mission to redefine vehicle safety and reliability on a global scale. Founded in 2016, we pioneered the world's first fully automated suite of AI-powered vehicle inspection systems, combining computer vision, machine learning, and generative AI.
With over $380M in funding and strategic partnerships with Toyota, Amazon, General Motors, JLR, Volvo, and Hertz, our technology is deployed across manufacturing plants, dealerships, wholesale auctions, fleets, and seaports worldwide. Named one of Fast Company's Most Innovative Companies of 2026, our 300+ global employees are solutions-oriented, accountable, and driven by one shared goal: making roads safer for everyone.
We seek a dedicated and proactive Senior SecOps Engineer to join our InfoSec team and take ownership of all security-related tasks across the organization. In this role, you will be key in aligning security goals with infrastructure, R&D and IT requirements. You will be responsible for integrating security into our CI/CD pipelines, managing cloud infrastructure security, ensuring compliance with security standards, and protecting our infrastructure from vulnerabilities.
?A day in the life and how you’ll make an impact: Implement and manage security tools such as static code analysis, cloud posture monitoring, and penetration testing tools. Embed security into the DevOps lifecycle, including CI/CD pipelines, IaC (Infrastructure as Code), and software development workflows. Design and enforce security policies for cloud architecture, ensuring secure configurations and monitoring. Lead incident response activities, vulnerability management, and forensic investigations to mitigate threats. Drive compliance efforts (ISO 27001, SOC 2, GDPR, etc.) and audit readiness for the organization. Work closely with stakeholders (CISO, COO, System Architects, DevOps, IT, Finance, HR, etc’) to identify requirements and prioritize security needs. Continuously monitor systems and infrastructure for vulnerabilities, intrusions, and misconfiguration. Perform or manage penetration testing initiatives to identify security weaknesses.

abra professional services is seeking a SecOps / Security Operations Specialist We are looking for a skilled SecOps / Security Operations Specialist to join an information security team and operate, maintain, and support advanced security tools and technologies. This role requires hands-on experience in SecOps / SOC, firewall management, WAF and DDoS protection, PAM / identity management, EDR/XDR, email security, incident response, and the use of AI technologies for cyber investigation and threat detection. A full-time position based in Israel. Key Responsibilities:
* Operate, configure, maintain, update, and manage policies and rules in Check Point firewalls.
* Manage, configure, and maintain WAF and DDoS protection systems, including Radware, Reblaze, and Cloudflare.
* Operate, manage, and maintain CyberArk PAM, identity, and access management processes.
* Manage and maintain Trend Micro products, including Vision One / Apex One, investigate EDR/XDR alerts, and operate email security systems against phishing and malware.
* Work with SOC teams, respond to alerts, perform initial incident response investigations, and support remediation processes.
* Use Generative AI / AI and automation tools to analyze security alerts, investigate logs, identify anomalies, and understand new security risks in environments that integrate AI tools.

we are looking for a hands-on Security Operations Engineer to join our IT and Cybersecurity team.
You will take ownership of implementing, configuring, and operating security tools and controls across the organization. The role combines security operations, incident response, technical policy implementation, and compliance support.
Responsibilities
Implement, configure, and maintain security systems and policies.
Monitor and investigate security alerts and coordinate remediation.
Manage endpoint, identity, device, network, and cloud security controls.
Improve security coverage across endpoints, servers, users, and corporate systems.
Manage vulnerabilities and track remediation through completion.
Develop and maintain incident-response procedures and playbooks.
Translate security policies and regulatory requirements into technical controls.
Support security audits, evidence collection, risk assessments, and compliance activities.
Work closely with IT and R&D teams, business stakeholders, security vendors, and external providers.
Maintain security documentation, operational procedures, and management reports.

At Infinidat, a Lenovo company, we help enterprises and service providers empower their data-driven competitive advantage at scale. As our Senior DevSecOps Engineer, you will be the foundational security expert within the DevOps team. Following a recent corporate transition, our infrastructure is moving into a highly regulated environment subject to strict, ongoing security compliance frameworks and external audits. You will lead the charge in designing, securing, and continuously adapting our infrastructure to meet these evolving enterprise and regulatory standards. Your immediate priority will be securing the environments where protected data is stored across public cloud infrastructure, on-premise virtual environments, and containerized clusters. Beyond immediate compliance, you will architect our secure cloud posture from the ground up, embed automated security guards seamlessly into our deployment pipelines, and mentor the broader engineering team on modern security practices.

Responsibilities:

* Compliance & Audit Leadership: Serve as the primary technical lead for rigorous security audits, ensuring continuous compliance, rapid adaptation to new security requirements, and production of audit-ready documentation.
* Infrastructure Hardening & Governance: Own, scale, and maintain automated machine image hardening pipelines utilizing industry-standard security baselines (such as CIS benchmarks). Extend these frameworks to define and enforce strict security baselines across container clusters and image registries.
* Secure Architecture & Networking: Architect secure hybrid environments handling sensitive data, focusing on robust network segmentation, zero-trust principles, and secure infrastructure-as-code deployment methodologies.
* Application Security Integration: Manage and optimize the integration of automated security scanning tools (SAST, SCA, and DAST) into CI/CD pipelines. Ensure reliable capture, aggregation, and reporting of scan results to satisfy product governance and audit requirements.
* Threat Detection & Observability: Implement and manage anomaly detection tools, automated access log review mechanisms, and comprehensive centralized auditing and logging solutions.
* Security Incident Response: Serve as the primary technical escalation point for infrastructure security incidents, creating automated playbooks for rapid triage and mitigation.
* Mentorship: Act as the security subject matter expert, identifying technical gaps and upskilling the DevOps and development teams in secure infrastructure concepts.

As a SecOps Engineer, you will help protect our companys cloud environments, products, corporate systems, and sensitive healthcare data by investigating SIEM alerts, supporting incident response, and improving the quality of security monitoring and operations.
This is a hands-on security operations role for someone who can analyze security signals, understand real risk, communicate clearly, and help the organization detect, investigate, and respond quickly and effectively to security events.
You will work closely with real production environments, where accurate investigation, clear documentation, and practical escalation are critical to protecting sensitive healthcare data, customer trust, and the reliability of our companys clinical AI platform.
Responsibilities
Own the end-to-end investigation of SIEM alerts across cloud, product, identity, endpoint, and SaaS environments: analyze the relevant evidence, separate false positives from real threats, and prioritize cases based on risk and impact.
Escalate high-risk findings with a clear summary of what happened, what is affected, why it matters, and what actions are required.
Support incident response by collecting evidence, assisting with containment, tracking remediation, and maintaining clear investigation records for internal reviews, compliance needs, and post-incident learning.
Improve SIEM rules, dashboards, alert logic, playbooks, telemetry coverage, and detection quality to reduce noise and strengthen security monitoring.
Work with Security, IT, DevOps, R&D, Product Security, and Compliance teams to resolve issues and improve security operations.

We are growing and are looking for DevSecops to join our mission to increase access to life-saving treatments.

The Role:

Collaboration & Enablement

Act as a security advisor to development teams.

Collaborate cross-functionally to prioritize and address security topics.

Communicate risk, projects and mitigation strategies clearly and effectively.

Security in Dev & CI/CD

Design, implement, and maintain secure DevOps practices across the SDLC.

Integrate security tools (SAST, DAST, SCA, CSPM, etc.) into CI/CD pipelines.

Guide developers and DevOps teams on secure coding, vulnerability management, and remediation.

Review and harden CI/CD architecture (webhook signature verification, SSRF protection, replay attack mitigation) as pipelines evolve from static tokens to app-based auth models.

AI Security & Governance

Own security governance for AI coding/agent tools (Claude Code, Cursor, Codex, etc.)

least-privilege identities, admin console + MDM policy enforcement, agent access scoping.

Assess and monitor AI/LLM supply chain risk (model providers, orchestration frameworks/libraries, dependency compromise).

Partner with engineering on secure AI tool adoption and usage governance.

Automation & Monitoring

Develop and maintain automated security testing and vulnerability scanning processes to detect and remediate risks early in the development lifecycle.

Build and operate monitoring and alerting systems to ensure visibility.

Integrate and manage Viz SIEM platform (Coralogix), optimizing ingestion for signal-to-noise (e.g., cutting CI/CD and internal telemetry noise while preserving high-signal events).

Define alerting rules and dashboards to proactively identify suspicious activity.

we are looking for a hands-on Senior Security Operations Engineer who wants to do more than monitor alerts and hand off tickets. In this role, you will have the rare opportunity to identify security problems, understand their root causes, and work directly with the teams responsible for fixing them.
You will strengthen threat detection, incident response, vulnerability management, and cloud security operations through a combination of investigation, engineering, and automation. You will design and tune detections, lead investigations and response efforts, prioritize and route vulnerabilities and CSPM/CWP findings, improve security telemetry, and build capabilities that reduce manual effort and help the organization respond faster.
This is an engineering-focused SecOps role- not a traditional alert-monitoring position. You will be expected to turn operational insights into durable improvements: better detections, stronger controls, cleaner telemetry, streamlined workflows, and measurable risk reduction. You will work closely with Cloud Security, Identity and IT, AppSec, Product Engineering, Platform Engineering, GRC, and service owners to secure corporate and cloud environments.
You will also help shape how secures AI-enabled tools, agents, and automation as they become part of the way we work. If you enjoy moving from signal to solution-and want the autonomy and cross-functional access to make security improvements stick-this role is built for you.

This is a full-time on-site role located in Haifa for a SecOps professional. The responsibilities include maintaining and optimizing security operations, identifying and mitigating potential vulnerabilities, implementing security monitoring solutions, and responding to security incidents. The role involves working collaboratively with cross-functional teams to ensure the deployment of robust security measures and policies across systems and infrastructures.

We are seeking a talented Senior DevSecOps Engineer / Security Architect to act as the primary security owner and focal point for the Velocity R&D organization. The ideal candidate will possess a background in IT and security platforms, strong coding skills, the ability to independently learn new technologies, an unwavering commitment to quality, a collaborative work ethic, and a profound passion for securing complex infrastructures.

We're looking for a Security Operations (SecOps) specialist to take ownership of our security infrastructure and operations as we scale. In this hands-on, high-impact role, youll play a crucial role in managing the infrastructure, services and service providers that help keep secure from outside attacks and insider threats, along with managing our information compliance programs.
Responsibilities:
Support and lead our security programs, both internal and with 3rd party vendors.
Lead incident response simulations and continuous vulnerability remediation efforts, optimizing our observability and alerting frameworks.
Support the design and maintenance of resilient, scalable cloud infrastructure, ensuring security is baked into the foundation.
Work closely with company leadership to ensure adoption of security best practices.
Work closely with R&D teams to help them shift security testing left into the early phases of development.
Monitor, detect, and respond to security alerts and infrastructure anomalies, optimizing our logging, tracing, and alerting frameworks.
Conduct regular reviews of security tools and infrastructure such as endpoint security, malware detection, firewall logs, and the like.
Collaborate with our CISO to implement and automate controls supporting fintech/insurtech compliance and data privacy standards (PII protection, SOC2).